CVE-2026-106764

Command Injection (CWE-78) — Remote Code Execution

package @rog0x/mcp-git-tools@1.0.1

attack vector MCP tool argument

status ASSIGNED

credit Still OS Digital Holdings LLC (Marcus Still)

A remote attacker can execute arbitrary code by supplying a crafted MCP tool-call argument that is interpolated into a shell command.

Independently verify

affected component src/tools/git-branch.ts — a documented tool argument is interpolated into a git command string executed through a shell. The specific function and parameter name are WITHHELD until a fixed version is published or the 90-day deadline passes.

→ MITRE CVE record (ID reserved; record not yet published)

→ npm package (verify the source yourself)

→ Coordinated-disclosure issue

The affected component and public references are stated so you can confirm the finding from the package's own published source. A weaponized reproduction is withheld under coordinated disclosure until a fixed version ships.

Maintainer of @rog0x/mcp-git-tools? Fixes, disputes, and coordinated-disclosure contact: here. Still OS Digital Holdings LLC · MITRE request 2112154.